Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that ...

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

An attacker minted 1 billion bridged DOT tokens on Hyperbridge before selling it all for just $237,000 in Ether, igniting renewed concerns tied to cross-chain bridge security.